DOMAIN 6: Security

CIA triad

Confidentiality, Integrity, Availability - the three core goals of security

Confidentiality

Keeping data private and accessible only to authorized users

Integrity

Ensuring data remains accurate and unaltered

Availability

Ensuring data and systems are accessible when needed

Authentication

Proving who you are, e.g. with a password or biometric

Authorization

What a user is allowed to access after authenticating

MFA

Multi-factor authentication; combining 2+ verification methods

Least privilege

Giving users only the access they need, nothing more

Virus

Malware that attaches to a file and needs user action to spread

Worm

Self-replicating malware that spreads without user action

Trojan

Malware disguised as legitimate software

Ransomware

Malware that encrypts data and demands payment to unlock it

Spyware

Malware that secretly monitors and collects user data

Adware

Malware that pushes unwanted advertisements

Keylogger

Malware that records keystrokes, often to steal credentials

Phishing

Fake emails or messages tricking users into giving up information

Shoulder surfing

Physically watching someone to see their sensitive information

Tailgating

Following an authorized person into a restricted area without credentials

Pretexting

Creating a fake scenario or story to extract information from someone

Firewall

Filters incoming and outgoing network traffic based on rules

Antivirus

Software that detects and removes malicious software

Encryption

Scrambling data so only authorized parties with a key can read it

VPN

Encrypts your internet connection and hides your traffic

Patch management

Keeping software updated to close security vulnerabilities

Physical security

Locks, badges, cable locks, and privacy screens that protect devices

Social engineering

Manipulating people, rather than technology, to gain access or info

Biometrics

Authentication using physical traits like fingerprints or face scans

Data breach

Unauthorized access to or exposure of sensitive data

Two-factor authentication (2FA)

Using exactly two authentication methods together

Password best practices

Long, complex, unique per account, and changed if compromised